CVE-2026-39728

The Instapage Plugin versions up to 3.7.2 are vulnerable to an unauthenticated Server Side Request Forgery (SSRF) attack, which could allow an attacker to send unauthorized requests from the server to internal resources. This vulnerability poses a significant risk as it may lead to data exposure or further exploitation of the underlying system. Organizations using this plugin should prioritize immediate remediation to mitigate potential security breaches.